$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2d1a5a-5b48-3143-b8a4-6dfab307da02.roa File: 3d2d1a5a-5b48-3143-b8a4-6dfab307da02.roa (raw, json) Hash identifier: I1XCokZ68rjBE5ufYIogk5XtdQxdy42mQvz98rzmTqs= Subject key identifier: 21:FA:DC:26:50:4B:CA:05:4D:AE:D0:0B:FA:59:2D:0F:06:86:EC:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E0700A5FB2DD6BDD2B0244F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2d1a5a-5b48-3143-b8a4-6dfab307da02.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 396550 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:a5:fb:2d:d6:bd:d2:b0:24:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=274ae933-6a05-402e-91e1-0c3ac9a7c2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:1a:1d:3e:ea:0b:00:58:ae:f5:f0:a6:c1: 01:44:12:fd:9d:e7:34:aa:5a:34:0f:65:28:ef:c5: c7:95:92:8b:33:4b:a4:cd:4e:45:69:92:8b:7f:81: 9a:30:79:e9:fc:88:80:d9:d9:70:ba:e7:2c:b3:6f: 3e:35:a7:f8:92:af:88:dc:29:ec:b8:d8:b0:62:a9: 70:d4:76:7a:4d:b9:95:cd:9b:bc:86:b2:0b:94:d4: aa:63:d1:40:3b:d0:ac:3c:35:54:35:a6:2f:09:b0: ee:eb:ec:a6:0f:54:e7:75:2b:8b:d2:c5:58:e2:63: 15:c0:ec:bb:33:0f:b4:6b:59:4c:1d:a5:84:c5:26: 74:ae:c9:a2:51:df:70:66:ee:6d:56:15:a1:5a:a8: b9:1f:a4:21:ab:06:bc:51:7a:3a:78:da:64:ff:4a: cc:d9:5e:fb:c5:41:cc:ed:86:ad:9b:46:9e:a4:3c: d1:0b:fc:b0:75:98:67:a2:34:04:b0:cd:59:97:26: 93:96:59:1f:04:23:79:43:b0:65:3d:9c:f5:48:a6: 89:c9:4c:66:d1:44:09:9c:20:10:38:f8:78:cb:5f: 08:5e:16:aa:7e:b4:b6:9c:55:26:64:a3:97:90:21: 6b:26:c1:1c:46:1b:32:f5:6d:d2:82:a8:ea:3f:c5: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:DC:26:50:4B:CA:05:4D:AE:D0:0B:FA:59:2D:0F:06:86:EC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2d1a5a-5b48-3143-b8a4-6dfab307da02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2d:f0:80:f0:e2:57:52:a3:74:93:1d:ff:e9:44:f8:25:5c: 97:cf:1b:22:ed:4a:5c:18:b5:d0:04:77:e2:ad:e0:76:fc:f8: b3:67:73:2e:08:09:e9:06:76:65:42:57:69:4f:aa:31:01:5b: db:c5:e5:2e:85:37:73:96:25:b2:4f:85:da:dd:d5:a4:45:f5: 06:c9:71:d3:47:ee:8a:da:82:f0:15:b1:5c:8f:78:2a:0c:a5: a2:6a:59:97:3d:b1:cd:b1:ee:74:85:7f:e2:5d:ed:33:78:83: 6d:5b:4b:df:72:15:27:7c:67:76:c6:1c:fe:76:d1:6c:e7:88: 7c:70:09:9f:9c:b7:39:23:4c:51:0c:a0:91:b9:0e:af:96:95: 36:66:ee:74:b3:64:66:0e:8a:e2:1a:c6:5b:55:1e:94:cb:95: da:12:d8:6c:3f:7f:84:8b:76:44:63:4c:19:6f:2a:43:3d:7f: 56:7b:24:b5:fa:45:6f:16:5d:d0:fe:d2:ed:ee:62:50:4e:87: 70:c4:f8:d7:fd:1a:ba:ea:a8:5c:5a:4d:b2:84:c2:84:3c:a8: 84:3f:7b:c2:ef:61:66:03:7a:b2:0d:d7:8b:92:a7:e7:c1:24: 7c:73:24:4b:c0:dd:f6:ea:9d:9f:91:6d:c9:0d:fb:32:46:54: 30:4c:21:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4HAKX7Lda90rAkTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk Mjc0YWU5MzMtNmEwNS00MDJlLTkxZTEtMGMzYWM5YTdjMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsgaHT7qCwBYrvXwpsEBRBL9nec0qlo0D2Uo 78XHlZKLM0ukzU5FaZKLf4GaMHnp/IiA2dlwuucss28+Naf4kq+I3CnsuNiwYqlw 1HZ6TbmVzZu8hrILlNSqY9FAO9CsPDVUNaYvCbDu6+ymD1TndSuL0sVY4mMVwOy7 Mw+0a1lMHaWExSZ0rsmiUd9wZu5tVhWhWqi5H6Qhqwa8UXo6eNpk/0rM2V77xUHM 7Yatm0aepDzRC/ywdZhnojQEsM1ZlyaTllkfBCN5Q7BlPZz1SKaJyUxm0UQJnCAQ OPh4y18IXhaqfrS2nFUmZKOXkCFrJsEcRhsy9W3SgqjqP8VWSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCH63CZQS8oFTa7QC/pZLQ8GhuyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2QyZDFhNWEtNWI0OC0z MTQzLWI4YTQtNmRmYWIzMDdkYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKst8IDw4ldSo3STHf/pRPglXJfPGyLtSlwYtdAEd+Kt4Hb8+LNn cy4ICekGdmVCV2lPqjEBW9vF5S6FN3OWJbJPhdrd1aRF9QbJcdNH7oragvAVsVyP eCoMpaJqWZc9sc2x7nSFf+Jd7TN4g21bS99yFSd8Z3bGHP520WzniHxwCZ+ctzkj TFEMoJG5Dq+WlTZm7nSzZGYOiuIaxltVHpTLldoS2Gw/f4SLdkRjTBlvKkM9f1Z7 JLX6RW8WXdD+0u3uYlBOh3DE+Nf9GrrqqFxaTbKEwoQ8qIQ/e8LvYWYDerIN14uS p+fBJHxzJEvA3fbqnZ+RbckN+zJGVDBMIYk= -----END CERTIFICATE-----Generated at Sat Jun 13 16:16:55 2026 by rpki-client